Uploaded image for project: 'Oozie'
  1. Oozie
  2. OOZIE-1458

If a Credentials type is not defined, Oozie should say something

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: trunk
    • Fix Version/s: 4.1.0
    • Component/s: security
    • Labels:
      None

      Description

      If you use the Credentials Module and define a <credentials> section like this:

      <credentials>
           <credential name='woot' type='hcat'>
                <property>
                     ...
                </property>
           </credential>
      </credentials>
      

      but you didn't add a credentials type for hcat in oozie-site.xml; that is, you did not add this:

      <property>
           <name>oozie.credentials.credentialclasses</name>
           <value>hcat=org.apache.oozie.action.hadoop.HCatCredentials</value>
      </property>
      

      then Oozie will silently not use the credentials class (because it doesn't know about it) so the action trying to use it will fail. It's pretty easy to forget to add the property to oozie-site.xml, so it would be nice if instead of silently ignoring needing to acquire a credential for an action, the workflow should fail either on that action when it tries to use the credential and can't find it, or (probably better) when submitting the workflow as part of the initial checking (e.g. after we do the forkjoin checking or something).

        Attachments

        1. OOZIE-1458.patch
          3 kB
          Robert Kanter

          Activity

            People

            • Assignee:
              rkanter Robert Kanter
              Reporter:
              rkanter Robert Kanter
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: